Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BFC15EB0A87111EFBB7C2F32C4F9AE02.roa
File: BFC15EB0A87111EFBB7C2F32C4F9AE02.roa (raw, json)
Hash identifier: 75lk9tJeIgI4lYF4nuWwExBPXnw8GGcb3Z+qjchM1Rs=
Subject key identifier: 20:37:95:88:E8:74:10:C4:98:BA:7C:8B:BF:B1:31:26:4A:D3:FD:6D
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 483F
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BFC15EB0A87111EFBB7C2F32C4F9AE02.roa
Signing time: Fri 22 Nov 2024 01:33:17 +0000
ROA not before: Fri 22 Nov 2024 01:33:17 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140810
IP address blocks: 103.77.172.0/23 maxlen: 23
103.77.214.0/23 maxlen: 23
103.77.240.0/23 maxlen: 23
103.77.246.0/23 maxlen: 23
103.78.0.0/23 maxlen: 23
103.116.38.0/23 maxlen: 23
103.141.140.0/23 maxlen: 23
103.176.108.0/23 maxlen: 24
103.178.234.0/23 maxlen: 23
103.213.218.0/23 maxlen: 23
103.214.8.0/22 maxlen: 22
103.238.234.0/23 maxlen: 23
103.252.136.0/23 maxlen: 23
223.130.10.0/23 maxlen: 23
2001:df4:d880::/48 maxlen: 48
2400:ece0::/48 maxlen: 48
2401:1960::/48 maxlen: 48
2401:2420::/48 maxlen: 48
2401:3660::/48 maxlen: 48
2401:36a0::/48 maxlen: 48
2401:3760::/48 maxlen: 48
2401:37a0::/48 maxlen: 48
2401:3f20::/48 maxlen: 48
2401:45a0::/48 maxlen: 48
2405:19c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 11:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18495 (0x483f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Nov 22 01:33:17 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=673fdf5d-84e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ae:54:f5:c7:38:1a:42:67:b6:5b:49:67:c5:
ce:d7:80:e4:1d:ec:17:8c:ab:cd:0c:46:24:a5:4c:
04:b9:0f:eb:f7:0c:d5:5b:62:46:c0:d6:98:2b:aa:
d1:1e:ed:bd:37:47:7c:bb:7d:5a:7a:1b:51:87:ce:
90:e9:85:11:0d:de:91:cc:3e:67:e3:d2:20:a4:24:
44:ee:27:3b:37:69:0c:f1:ae:6e:fc:2d:13:12:d7:
5c:fb:3a:c6:f6:a2:96:07:0b:f2:e9:19:c5:3a:5d:
8a:f0:2c:c9:af:26:88:00:c7:f7:96:72:8c:d7:30:
95:05:2b:55:b3:a4:0f:37:53:c3:90:43:69:7f:82:
2b:f1:c6:5d:f4:8e:54:2f:91:89:c1:eb:db:7c:3b:
a2:28:11:3a:d7:6d:83:fe:79:6f:c5:c2:9a:14:97:
c4:ef:2a:53:eb:a4:55:4a:99:a3:19:b6:e7:fd:1d:
d6:69:97:17:7f:1e:ce:b1:93:7e:13:94:37:f4:e7:
53:96:b4:a8:56:d6:63:68:cc:f5:b5:12:5d:2b:c0:
dc:b8:c9:35:f3:61:12:1a:a1:92:16:d8:70:30:df:
f7:16:40:af:b8:fa:d4:d8:97:40:39:90:5b:41:cc:
9d:d3:12:fd:d0:dc:69:f6:6c:f2:de:ef:83:95:66:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:37:95:88:E8:74:10:C4:98:BA:7C:8B:BF:B1:31:26:4A:D3:FD:6D
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BFC15EB0A87111EFBB7C2F32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.172.0/23
103.77.214.0/23
103.77.240.0/23
103.77.246.0/23
103.78.0.0/23
103.116.38.0/23
103.141.140.0/23
103.176.108.0/23
103.178.234.0/23
103.213.218.0/23
103.214.8.0/22
103.238.234.0/23
103.252.136.0/23
223.130.10.0/23
IPv6:
2001:df4:d880::/48
2400:ece0::/48
2401:1960::/48
2401:2420::/48
2401:3660::/48
2401:36a0::/48
2401:3760::/48
2401:37a0::/48
2401:3f20::/48
2401:45a0::/48
2405:19c0::/32
Signature Algorithm: sha256WithRSAEncryption
46:7b:79:a7:d6:57:03:e9:33:69:47:01:24:57:d0:dc:d1:d3:
43:c6:68:9c:03:d7:ba:bb:a0:89:c7:1d:0f:33:ef:90:28:b2:
b1:87:eb:44:dd:fe:d5:6e:17:21:f1:6e:03:4b:ed:9e:70:cb:
82:4a:f8:77:73:3a:e0:87:2b:8f:76:34:88:09:e7:21:fb:78:
b7:5c:07:9a:c4:ec:7f:3f:03:aa:76:83:12:79:c0:3a:11:61:
7e:5c:67:45:46:89:ef:f6:bf:76:cd:30:23:c6:0e:05:12:b6:
6f:b1:3b:a2:70:7f:51:73:78:9d:d5:4c:33:8c:70:70:e6:12:
b8:6d:77:e5:d4:0c:9c:2a:cb:f4:8f:ee:32:c1:93:1b:8c:a5:
33:5b:b8:49:75:60:82:0b:41:ca:9f:30:b7:06:94:46:bd:b8:
82:15:b8:74:51:e9:a8:82:01:8c:da:ee:6a:5e:cb:a8:2e:6d:
8f:83:54:80:a9:21:1d:87:f0:ff:5c:1d:17:2c:87:f2:56:bc:
7d:a0:3b:cb:d8:cc:b1:b8:72:87:19:a6:76:8b:c6:4f:b7:2d:
1d:97:4b:d4:32:8c:ad:57:95:df:4d:d5:24:3f:a7:04:a5:ea:
15:4d:54:19:21:39:99:ce:ae:f1:79:ec:04:19:74:ff:b6:40:
ba:ca:f0:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:16 2024 by rpki-client on console-fra.rpki-client.org